Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/05BF31A412A111F19F0D7733B3EE528E.roa
File:                     05BF31A412A111F19F0D7733B3EE528E.roa (raw, json)
Hash identifier:          61jDWWDKd90oSHboNJPNDq1F1xi5lJNklhwlns9ZzWY=
Subject key identifier:   8B:E0:5F:84:12:3F:3B:73:69:DD:FE:38:6B:A4:68:DC:65:F5:81:39
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       3747
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/05BF31A412A111F19F0D7733B3EE528E.roa
Signing time:             Fri 27 Feb 2026 05:54:20 +0000
ROA not before:           Wed 25 Feb 2026 23:23:42 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     4608
IP address blocks:        203.30.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14151 (0x3747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Feb 25 23:23:42 2026 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=69a1318c-3cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:3e:38:fb:e3:78:fb:66:0d:be:67:06:ee:
                    42:c5:21:98:8e:72:59:ff:61:2e:5b:eb:32:30:38:
                    15:66:32:bb:10:64:c5:bb:74:ba:2e:be:29:63:c1:
                    07:0e:7e:77:48:25:a8:9a:bb:17:de:4c:15:71:f5:
                    0d:48:8e:27:96:30:48:38:88:c6:35:34:97:b3:86:
                    a9:a8:7c:29:40:d2:03:ae:bb:af:eb:ae:94:25:0c:
                    46:58:d3:e2:9f:ca:d7:59:4d:eb:31:9b:9c:61:4f:
                    73:dd:a5:12:54:8f:2f:f3:70:98:93:bf:94:8c:f0:
                    3a:95:51:6c:c9:0b:a2:7f:bb:b8:48:ec:7c:c8:bd:
                    fb:e9:dd:31:2c:e1:7b:81:73:1f:df:23:71:03:f7:
                    23:f4:41:80:c1:ce:ec:c0:ee:d2:5c:24:17:71:1e:
                    d6:63:b5:4c:9e:d8:d8:c4:a4:55:6d:6b:d6:b4:a8:
                    05:5c:d7:76:63:37:32:3b:f6:5f:40:86:06:b0:2f:
                    d1:ca:e4:c6:35:cf:cd:6e:4a:f0:0d:e7:34:b4:1a:
                    73:cb:79:32:46:08:55:07:0b:e3:6b:01:bf:fe:42:
                    ad:bb:02:70:ed:42:d2:82:d8:ad:1a:ef:e7:7a:06:
                    67:10:70:64:7e:62:1e:ff:f4:d7:90:5d:65:f1:32:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E0:5F:84:12:3F:3B:73:69:DD:FE:38:6B:A4:68:DC:65:F5:81:39
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/05BF31A412A111F19F0D7733B3EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:c8:a2:33:f9:fe:20:f4:db:44:bf:9d:d1:8d:08:0d:e9:ec:
         2c:82:34:75:a5:2a:59:18:ae:ae:bc:7d:ab:73:f4:b9:55:72:
         0a:7a:79:40:02:9f:ee:7c:3d:dc:df:42:b6:c2:6e:f1:7e:cb:
         d5:45:06:98:f4:2c:82:2c:0b:3d:fa:77:0d:de:99:d8:fd:2b:
         dd:d8:5c:d9:2f:13:b7:f9:fd:ea:39:77:de:3d:8a:a4:f2:17:
         86:08:8e:51:3c:fd:81:e0:e3:7b:38:7e:b8:31:bc:d0:7c:8b:
         c8:63:a0:28:1d:3b:42:70:78:ed:5f:f6:78:49:25:7f:b2:2c:
         8a:58:f3:da:19:7e:cb:56:82:19:87:e4:72:bf:1f:95:10:bb:
         0f:7e:ce:ad:3b:f1:78:5c:a9:6b:67:2d:ab:29:dc:13:3e:18:
         a9:69:cf:5e:40:e1:75:a1:2c:b9:b6:89:87:18:a4:54:d0:60:
         7d:bc:22:2c:e8:bf:d2:1f:88:3e:80:20:e5:ac:04:bb:81:72:
         90:7e:c1:fe:c9:b2:a6:65:e7:36:b7:4f:82:17:76:cd:df:a8:
         4c:cc:22:dd:5b:bf:0f:e8:68:66:af:2f:5a:8a:b4:7f:c5:a1:
         c5:99:2f:ba:ee:2c:92:a0:de:3b:7d:84:3b:da:c9:dd:d0:a1:
         1c:16:47:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:29 2026 by rpki-client